We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent c668902 commit c2f3a04Copy full SHA for c2f3a04
1 file changed
gems/jekyll/CVE-2018-17567.yml
@@ -0,0 +1,14 @@
1
+---
2
+gem: jekyll
3
+cve: 2018-17567
4
+date: 2018-09-28
5
+url: https://jekyllrb.com/news/2018/09/19/security-fixes-for-3-6-3-7-3-8/
6
+title: Jekyll _config.yml privilege escalation
7
+description: Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows
8
+ attackers to access arbitrary files by specifying a symlink in the "include" key
9
+ in the "_config.yml" file.
10
+cvss_v3: 7.5
11
+patched_versions:
12
+- "~> 3.6.3"
13
+- "~> 3.7.4"
14
+- ">= 3.8.4"
0 commit comments